Source Intelligence
Follow Discord

DisclaimerUnofficial, and not affiliated with Anthropic. Nearly all of this is read straight out of what ships: npm bundles, captured prompts, published docs. Anthropic's own notes go in verbatim, marked as theirs. The rest is my reading, and every entry carries the strings behind it. If one looks wrong, vote it down and say why.

← All of v2.1.236 Home All releases ←olderv2.1.235 v2.1.237newer→
Claude Code v2.1.236

Cross-session messages check who they are writing to

You'll notice
Useful2 Signal3
Cross-Session Messaging

Messages between your sessions verify the process on the other end before writing.

What

When one Claude Code session sends to another over a local socket, it now refuses to follow a symlinked reply target, and on macOS and Linux can compare the process ID on the other end of the connection against the one it expected, aborting the write on a mismatch or an unreadable ID.

Details
  • The process-ID check only applies when the caller supplies an expected ID; it is skipped on Windows.
  • Startup socket bind time is now recorded, along with whether the bind succeeded.
Evidence

Refusing to send: connected endpoint is not the expected process

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

Related

Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.

See this entry in the whole of v2.1.236 →